docs(openspec): archive fpagent-release-installer and sync specs

2026-10-02 09:53:35 +01:00
parent 46027acec1
commit e3392c7750
8 changed files with 479 additions and 5 deletions
@@ -0,0 +1,34 @@
+# tools-app Specification
+
+## MODIFIED Requirements
+
+### Requirement: Configuration is hardcoded
+
+The app SHALL hardcode all configuration in source: port `4173`, portal
+`https://portal.yrka.app`, PocketBase `https://pb.itcass.net`, a2loft
+`https://apis.a2loft.net`, agent `http://127.0.0.1:9000`, and the fingerprint
+agent release forge `https://sources.yrka.app`. There SHALL be no runtime
+configuration via environment variables or config files, with two exceptions:
+the Image Cropper's service credentials (Minio keys, Azure storage connection
+string, nodered credentials, cleanup-service key) SHALL come from environment
+variables and SHALL NOT be stored in source; and the Fingerprint Agent
+installer's release key (`GITEA_RELEASE_INSTALL_KEY`) SHALL come from the
+environment and SHALL NOT be stored in source.
+
+#### Scenario: No configuration required to run
+
+- **WHEN** the app is started with no environment variables or config files
+- **THEN** it serves on port 4173 with the hardcoded external endpoints
+
+#### Scenario: Cropper credentials from the environment
+
+- **WHEN** the cropper credentials are supplied as environment variables
+- **THEN** the cropper routes use them without any change to the hardcoded
+  URL/port configuration
+
+#### Scenario: Installer key from the environment
+
+- **WHEN** the fpagent installer release key is supplied as an environment
+  variable
+- **THEN** the installer and release-proxy routes use it without any change to
+  the hardcoded URL/port configuration